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1 . A method far a service provider ott a private network to provide a service for an 

I j i 

external client on aa external network via a gatswjay -hridgmg the private and external 

* t 

networks, including the service provider carrying out the steps of: 

- allocating a virtual name to the service! provider, 

making the virtual name available to aJcUenlrbn the external network; 

- bt&ding &e virtual name to the roaring address of the gateway on the external 

; i I 

network; and • : 

binding the virtual najti«? to the routing addres^ of tfee service provider on the 
private network. \ \ 



2. A method as claimed in claim 1 m j which virtual name is bound to the routing 

i * ^ 
( < | 

address of lbs gateway 2nd the routing adj&ess of the service provides- by way of an 

' * ! . 
external domain name server aend pnvate domain nam^ server, respectively. 



3. A method as chimed in claim i m which Ehe virtual amc is bound to the 

muling address of thc $er;ice provito-oxi an i^emal naming service. 

1 ; i 



A . (Amended) A method as claimed in claim ,1 in which the external 
network includes the internet. 



5. (Amended? A method as claimed in ciaim 1 in which the client 
and the service provider communicate by v;ay of tunnelled session 
via the gat way. 
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& A method as claimed in claim 5 in jwhi'ch messages communicated between tha 
client and service provider are encrvpred, if 1 \ 

' U 

7- A method as claused in claim I in which |ic client is on a second internal 



network distinct from tte internal network of the service provider and a second gateway 

: j. 

bridges, die second internal ncTwork and ekt€nial.jne4wodc,. th« method including the 
steos of: * ; 

allocating a second virtual n&inc jo the'jcUenl; | 

! 

making the second virtual same available to the service provider; 
* binding the second virtual narne to the routirig address of the second gateway on 
(he external network; and ; j 

b baling ib? second virtual name to the routing address of the client on the second 
internal network. 5 f 



S, A method as chimed in claim I in %vbich there is a second service provider o& a 
second pdv&te network able to communicate with an. externa] netwoik via a second 
gateway bridging the second private ami external network, including the steps of: 
allocating a second virtual name to tWsccona service provider; 

making the second virtual name available n> ajclient; 

i i 

binding the second virtual name to the routing address of she second gateway cm 
the external network; and i I 

binding the second vhtual name to {the routing address of the second service 
provider on the second private nciwot^, j 

' , \ 

9. A method as claimed in claim 1 . in which the external netw ork, includes a further 

private network containing die private network of the service provider and there is 

further gateway bridging farther private network to the portion of the external 

is , 
network which is external to the further private ^network, the method including the 

.additional steps ot j j 

- binding the virtual name to routing address ofjthe fuller gateway on &e portion of 
the external network which is externa! lo the farther pri vate network. 
X | \ 

10. A method of providing access to a server on a private network froni an external 
client on an external network via a gateway bridging the private and externa] networks, 
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thr jgateway Sl gjp 0rt j [n g tunnelling of seconp messages to said server by encap&ilatjjig 
them in first messages routed to the gateway; the method involving: 

(a) - allocating & virtual nam* to the server caid taping it by a first mapping to the 

routing address of fits gateway on thelexteraal netwcuft and by a second inappmg 
so the nttitirig address of the server on. the prfvatc ftetworfc 

(b) - ai said eternal tfteaH, using the viittiai name |o address a said first message and a 

said second msssagvths former encapkktingihc latter 

(c) - using- the first mappM* to remta the first rn^sagc with its encapsulated second 

ni^jsagCs to the gstew«yj aud { !j 

(d) - using the second mapping to route the second m-e&sags extracted at the gateway 

from the tet message to the -serv«r. * | 

* ft 

; s 

'§■ 

11. A iBctbod w claimed m cMm 10 in ' which said first messages- arc eaeaypced* 

I. I 

: s 

/ i 

12. (New) A method as claimed in claim 2 in which the external 
network includes the internet. 

13. (Klew} h method as claimed in claim 3 in which the external 
ti&tw&zk includes the internet. 

14. {Bm$} A method as claimed, in claim 2 in which the client and 
the service provider communicate by way of tunnelled session via 
the gateway. 

15- {New) A method as claimed in claim 3 in which the client and 
the service provider communicate by way of tunnelled &&aalon via 
the gateway., 

16. (New) A method as claimed in claim 4 in which the client and 
the service provider communicate by w^y of tunnelled session via 
the gateway. 



